Dell Security Management Server Virtual Quick Start and Installation Guide v11.9

If a self-signed certificate is used on the Security Management Server Virtual for SED or BitLocker Manager, SSL/TLS trust validation must remain disabled on the client computer. Before enabling SSL/TLS trust validation on the client computer, the following requirements must be met:

• A certificate signed by a root authority (for example, Entrust or Verisign) must be imported into the Dell Server. See Import an Existing Certificate or Enroll a New Server Certificate.

• The full chain of trust of the certificate must be stored in the Microsoft keystore on the client computer.

To disbale SSL/TLS trust validation, on the client computer, change the value of the following registry entry to 1:

[HKLM\System\CurrentControlSet\Services\DellMgmtAgent\Parameters]

DisableSSLCertTrust=REG_DWORD (32-bit):1